Privacy policy

Last updated: 6 October 2026

Who is responsible

LYFE, Duivenvoorde 18, 1187 DJ Amstelveen, the Netherlands, KVK 80987389, is the controller of your personal data. Questions? Email [email protected].

What we collect and why

When you order, we process your name, email address, phone number, shipping and billing address, the products chosen, the amount and the message for the card. If you send the gift to someone else, we also process the recipient's name and address. We use this to process and deliver your order, keep you informed and meet our legal (tax) obligations. The legal basis is performance of the contract and a legal obligation.

If you arrive through an ad, we store the campaign details from the link (such as utm codes) with your order so we can see which campaigns work. This is our legitimate interest.

Who we work with

We only share data with the parties we need: Stripe (payments), Supabase (order storage, EU servers), Cloudflare (website hosting), the carrier (delivery) and Google Fonts (website fonts). Agreements with these parties protect your data. Some are based in the United States; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. We never sell your data.

Cookies

At checkout, Stripe sets functional cookies needed for a secure payment. We also use Google Analytics (to see how the website is used, with a truncated IP address) Microsoft Clarity (to see, anonymised, how visitors scroll and click, with input fields masked) and the Meta pixel (to measure which ads work). These only load if you consent in the cookie banner. Google then sets the _ga and _ga_* cookies Microsoft the _clck and _clsk cookies, and Meta the _fbp and _fbc cookies. Meta also receives data about your visit and, after an order, a hashed version of your email address and phone number and the order value. You can change your choice at any time via Cookie settings at the bottom of every page. Google, Microsoft and Meta may process data outside the EU under the European Commission's standard contractual clauses.

How long

Order and invoice data are kept for 7 years, as required by tax law.

Your rights

You have the right to access, correct, delete, restrict, port and object. Email [email protected]; we reply within one month. If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).